CVE-2022-27043

Yearning has a Directory Traversal vulnerability (CVE-2022-27043) affecting multiple versions: 2.3.1, 2.3.2 (Interstellar GA) and 2.3.4–2.3.6 (Neptune). Unauthenticated attackers can read arbitrary files from the Yearning database management system. Remediation: update Yearning to a patched versi...

CVE-2022-27043: Improper Limitation of a Pathname to a Restricted Directory

Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal...

PT-2022-18189

Name of the Vulnerable Software and Affected Versions Yearning versions 2.3.1 through 2.3.2 Yearning versions 2.3.4 through 2.3.6 Description The issue allows for Directory Traversal. Recommendations For versions 2.3.1 through 2.3.2, update to a version that is not affected by the Directory...

Yearning path traversal vulnerability

Yearning is an excellent and convenient Mysql SQL auditing platform for Henry Yee's personal developers in China. A security vulnerability exists in Yearning, which stems from a directory traversal vulnerability. An attacker can exploit this vulnerability to obtain sensitive information. The...